Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F1EF22A0EAD297DD59BFA0D9C388596E6983446B133C315BF94A0384F7B76EB8/0/34352e3232342e3230322e302f32342d3234203d3e203238313130.roa
File:                     34352e3232342e3230322e302f32342d3234203d3e203238313130.roa (raw, json)
Hash identifier:          RfgHnKxnwzeCcsSQKv/eqA4SzvI7BtLaRvAxSM4jxzA=
Subject key identifier:   89:BD:A3:1F:27:82:27:F0:09:B5:5D:8C:8B:5A:DC:12:E6:CF:9E:49
Certificate issuer:       /CN=AFA5B7159B79E10B51E1FADEDB4C25C651CE0400
Certificate serial:       4C464031F79FAE51D3B072AC82A94DF2EC59D194
Authority key identifier: AF:A5:B7:15:9B:79:E1:0B:51:E1:FA:DE:DB:4C:25:C6:51:CE:04:00
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AFA5B7159B79E10B51E1FADEDB4C25C651CE0400.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F1EF22A0EAD297DD59BFA0D9C388596E6983446B133C315BF94A0384F7B76EB8/0/34352e3232342e3230322e302f32342d3234203d3e203238313130.roa
Signing time:             Tue 12 May 2026 06:42:09 +0000
ROA not before:           Tue 12 May 2026 06:37:09 +0000
ROA not after:            Tue 11 May 2027 06:42:09 +0000
asID:                     28110
IP address blocks:        45.224.202.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F1EF22A0EAD297DD59BFA0D9C388596E6983446B133C315BF94A0384F7B76EB8/0/AFA5B7159B79E10B51E1FADEDB4C25C651CE0400.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F1EF22A0EAD297DD59BFA0D9C388596E6983446B133C315BF94A0384F7B76EB8/0/AFA5B7159B79E10B51E1FADEDB4C25C651CE0400.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AFA5B7159B79E10B51E1FADEDB4C25C651CE0400.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 16 May 2026 21:43:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:46:40:31:f7:9f:ae:51:d3:b0:72:ac:82:a9:4d:f2:ec:59:d1:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AFA5B7159B79E10B51E1FADEDB4C25C651CE0400
        Validity
            Not Before: May 12 06:37:09 2026 GMT
            Not After : May 11 06:42:09 2027 GMT
        Subject: CN=89BDA31F278227F009B55D8C8B5ADC12E6CF9E49
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:64:f3:40:70:bd:d6:13:89:68:55:5b:da:dc:
                    f8:0d:12:f4:e2:74:15:02:25:ac:c1:88:11:15:da:
                    cb:fa:d5:3d:b9:b8:99:bf:78:e2:58:dc:14:ae:3d:
                    81:a0:c1:75:a7:c5:f8:ae:a4:74:06:21:46:c0:0d:
                    5e:fc:e0:b7:d1:ba:4d:30:b4:76:de:82:5b:78:8c:
                    c0:e7:d5:6b:09:8c:0f:0c:35:5e:d1:f9:90:10:7b:
                    d2:8d:1a:8d:f5:4d:0b:bc:9d:a2:69:48:20:59:6e:
                    50:38:c8:22:7a:c7:38:e0:92:58:cc:d1:b0:66:c8:
                    b7:43:29:08:5d:29:0a:56:b4:1c:86:ba:54:9c:99:
                    50:d3:e4:32:60:cd:c1:b0:6e:c0:e2:54:be:61:b9:
                    e0:9c:d9:30:0c:ed:d8:be:11:f7:6d:b6:34:e3:4e:
                    7d:f1:c8:78:9d:31:36:5d:18:27:cf:57:ac:21:89:
                    5d:b7:42:eb:b0:7d:bb:2a:68:d6:e1:63:76:80:51:
                    0c:bc:4b:e9:04:33:18:7c:43:ac:e8:ca:b8:ff:04:
                    8e:bf:9a:15:66:de:10:a3:b1:38:ab:2d:c9:c5:ce:
                    1e:43:4e:08:10:8c:c4:40:0a:2e:fd:76:4e:c3:69:
                    c4:65:71:a0:34:ac:b7:b5:ff:cc:ce:e9:4f:22:db:
                    cc:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:BD:A3:1F:27:82:27:F0:09:B5:5D:8C:8B:5A:DC:12:E6:CF:9E:49
            X509v3 Authority Key Identifier:
                keyid:AF:A5:B7:15:9B:79:E1:0B:51:E1:FA:DE:DB:4C:25:C6:51:CE:04:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F1EF22A0EAD297DD59BFA0D9C388596E6983446B133C315BF94A0384F7B76EB8/0/AFA5B7159B79E10B51E1FADEDB4C25C651CE0400.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AFA5B7159B79E10B51E1FADEDB4C25C651CE0400.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F1EF22A0EAD297DD59BFA0D9C388596E6983446B133C315BF94A0384F7B76EB8/0/34352e3232342e3230322e302f32342d3234203d3e203238313130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.224.202.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a5:20:15:bf:ae:16:a9:3d:77:22:fb:b1:18:fa:50:4d:e5:8d:
         2c:08:56:11:61:e0:a2:04:e8:65:97:74:1d:17:e0:09:09:04:
         7c:0e:77:ba:98:ec:8f:2c:1c:c5:bc:87:4a:39:7e:9a:bd:11:
         31:a8:3e:76:e9:c3:91:73:0c:09:8b:d5:6f:ff:fd:c5:57:93:
         ba:f5:96:fc:48:31:ad:1d:42:11:e5:cb:84:27:2c:26:b9:56:
         8c:a1:be:c5:08:84:86:cd:92:62:b2:04:12:48:f5:5e:4a:2e:
         75:75:dd:f7:67:62:27:0c:1f:32:90:ed:65:13:65:04:28:6c:
         02:6d:26:25:02:0e:ad:dd:fb:ed:a6:02:b6:80:f2:95:46:05:
         c7:23:24:93:2f:6c:98:1a:9a:ea:ca:35:ec:f9:73:56:87:13:
         27:b7:53:fd:85:80:95:39:35:a3:11:cd:29:f5:4f:f2:5b:b0:
         63:75:d2:5a:02:84:41:90:a0:c4:88:17:a3:ec:5b:2d:b8:d4:
         8c:f8:da:60:f6:63:dd:ea:97:b0:b5:7c:af:95:c4:a2:7e:d1:
         7d:6d:36:3b:d8:ec:41:87:62:51:58:7c:8e:d0:55:60:08:b0:
         ae:f1:aa:43:28:6f:7a:6a:78:3a:bb:15:11:58:4e:9f:4e:60:
         2c:a6:b5:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 18:05:37 2026 by rpki-client